[Snyk] Upgrade: react, react-dom #518

snyk-bot · 2020-03-07T04:15:17Z

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on
react from 16.8.2 to 16.13.0	13 versions ahead of your current version	9 days ago on 2020-02-26
react-dom from 16.8.2 to 16.13.0	13 versions ahead of your current version	9 days ago on 2020-02-26

Release notes

Package name: react

16.13.0 - 2020-02-26
React
- Warn when a string ref is used in a manner that's not amenable to a future codemod (@lunaruan in #17864)
- Deprecate React.createFactory() (@trueadm in #17878)
React DOM
- Warn when changes in style may cause an unexpected collision (@sophiebits in #14181, #18002)
- Warn when a function component is updated during another component's render phase (@acdlite in #17099)
- Deprecate unstable_createPortal (@trueadm in #17880)
- Fix onMouseEnter being fired on disabled buttons (@AlfredoGJ in #17675)
- Call shouldComponentUpdate twice when developing in StrictMode (@bvaughn in #17942)
- Add version property to ReactDOM (@ealush in #15780)
- Don't call toString() of dangerouslySetInnerHTML (@sebmarkbage in #17773)
- Show component stacks in more warnings (@gaearon in #17922, #17586)
Concurrent Mode (Experimental)
- Warn for problematic usages of ReactDOM.createRoot() (@trueadm in #17937)
- Remove ReactDOM.createRoot() callback params and added warnings on usage (@bvaughn in #17916)
- Don't group Idle/Offscreen work with other work (@sebmarkbage in #17456)
- Adjust SuspenseList CPU bound heuristic (@sebmarkbage in #17455)
- Add missing event plugin priorities (@trueadm in #17914)
- Fix isPending only being true when transitioning from inside an input event (@acdlite in #17382)
- Fix React.memo components dropping updates when interrupted by a higher priority update (@acdlite in #18091)
- Don't warn when suspending at the wrong priority (@gaearon in #17971)
- Fix a bug with rebasing updates (@acdlite and @sebmarkbage in #17560, #17510, #17483, #17480)
Artifacts
- react: https://unpkg.com/[email protected]/umd/
- react-art: https://unpkg.com/[email protected]/umd/
- react-dom: https://unpkg.com/[email protected]/umd/
- react-is: https://unpkg.com/[email protected]/umd/
- react-test-renderer: https://unpkg.com/[email protected]/umd/
- scheduler: https://unpkg.com/[email protected]/umd/
16.12.0 - 2019-11-14
React DOM
- Fix passive effects (useEffect) not being fired in a multi-root app. (@acdlite in #17347)
React Is
- Fix lazy and memo types considered elements instead of components (@bvaughn in #17278)
Artifacts

• react: https://unpkg.com/[email protected]/umd/
• react-art: https://unpkg.com/[email protected]/umd/
• react-dom: https://unpkg.com/[email protected]/umd/
• react-is: https://unpkg.com/[email protected]/umd/
• react-test-renderer: https://unpkg.com/[email protected]/umd/
• scheduler: https://unpkg.com/[email protected]/umd/
16.11.0 - 2019-10-22
React DOM
- Fix mouseenter handlers from firing twice inside nested React containers. @yuanoook in #16928
- Remove unstable_createRoot and unstable_createSyncRoot experimental APIs. (These are available in the Experimental channel as createRoot and createSyncRoot.) (@acdlite in #17088)
Artifacts

• react: https://unpkg.com/[email protected]/umd/
• react-art: https://unpkg.com/[email protected]/umd/
• react-dom: https://unpkg.com/[email protected]/umd/
• react-is: https://unpkg.com/[email protected]/umd/
• react-test-renderer: https://unpkg.com/[email protected]/umd/
• scheduler: https://unpkg.com/[email protected]/umd/
16.10.2 - 2019-10-03
React DOM
- Fix regression in react-native-web by restoring order of arguments in event plugin extractors (@necolas in #16978)
Artifacts

• react: https://unpkg.com/[email protected]/umd/
• react-art: https://unpkg.com/[email protected]/umd/
• react-dom: https://unpkg.com/[email protected]/umd/
• react-is: https://unpkg.com/[email protected]/umd/
• react-test-renderer: https://unpkg.com/[email protected]/umd/
• scheduler: https://unpkg.com/[email protected]/umd/
16.10.1 - 2019-09-28
React DOM
- Fix regression in Next.js apps by allowing Suspense mismatch during hydration to silently proceed (@sebmarkbage in #16943)
16.10.0 - 2019-09-27
React DOM
- Fix edge case where a hook update wasn't being memoized. (@sebmarkbage in #16359)
- Fix heuristic for determining when to hydrate, so we don't incorrectly hydrate during an update. (@sebmarkbage in #16739)
- Clear additional fiber fields during unmount to save memory. (@trueadm in #16807)
- Fix bug with required text fields in Firefox. (@halvves in #16578)
- Prefer Object.is instead of inline polyfill, when available. (@ku8ar in #16212)
- Fix bug when mixing Suspense and error handling. (@acdlite in #16801)
Scheduler (Experimental)
- Improve queue performance by switching its internal data structure to a min binary heap. (@acdlite in #16245)
- Use postMessage loop with short intervals instead of attempting to align to frame boundaries with requestAnimationFrame. (@acdlite in #16214)
useSubscription
- Avoid tearing issue when a mutation happens and the previous update is still in progress. (@bvaughn in #16623)
Artifacts

• react: https://unpkg.com/[email protected]/umd/
• react-art: https://unpkg.com/[email protected]/umd/
• react-dom: https://unpkg.com/[email protected]/umd/
• react-is: https://unpkg.com/[email protected]/umd/
• react-test-renderer: https://unpkg.com/[email protected]/umd/
• scheduler: https://unpkg.com/[email protected]/umd/
16.9.0 - 2019-08-08
React
- Add <React.Profiler> API for gathering performance measurements programmatically. (@bvaughn in #15172)
- Remove unstable_ConcurrentMode in favor of unstable_createRoot. (@acdlite in #15532)
React DOM
- Deprecate old names for the UNSAFE_* lifecycle methods. (@bvaughn in #15186 and @threepointone in #16103)
- Deprecate javascript: URLs as a common attack surface. (@sebmarkbage in #15047)
- Deprecate uncommon "module pattern" (factory) components. (@sebmarkbage in #15145)
- Add support for the disablePictureInPicture attribute on <video>. (@eek in #15334)
- Add support for onLoad event for <embed>. (@cherniavskii in #15614)
- Add support for editing useState state from DevTools. (@bvaughn in #14906)
- Add support for toggling Suspense from DevTools. (@gaearon in #15232)
- Warn when setState is called from useEffect, creating a loop. (@gaearon in #15180)
- Fix a memory leak. (@paulshen in #16115)
- Fix a crash inside findDOMNode for components wrapped in <Suspense>. (@acdlite in #15312)
- Fix pending effects from being flushed too late. (@acdlite in #15650)
- Fix incorrect argument order in a warning message. (@brickspert in #15345)
- Fix hiding Suspense fallback nodes when there is an !important style. (@acdlite in #15861 and #15882)
- Slightly improve hydration performance. (@bmeurer in #15998)
React DOM Server
- Fix incorrect output for camelCase custom CSS property names. (@bedakb in #16167)
React Test Utilities and Test Renderer
- Add act(async () => ...) for testing asynchronous state updates. (@threepointone in #14853)
- Add support for nesting act from different renderers. (@threepointone in #16039 and #16042)
- Warn in Strict Mode if effects are scheduled outside an act() call. (@threepointone in #15763 and #16041)
- Warn when using act from the wrong renderer. (@threepointone in #15756)
Artifacts

• react: https://unpkg.com/[email protected]/umd/
• react-art: https://unpkg.com/[email protected]/umd/
• react-dom: https://unpkg.com/[email protected]/umd/
• react-is: https://unpkg.com/[email protected]/umd/
• react-test-renderer: https://unpkg.com/[email protected]/umd/
• scheduler: https://unpkg.com/[email protected]/umd/
16.9.0-rc.0 - 2019-08-05
This is a release candidate for React v16.9.0.

Changelog is available in #16254.

UMD builds

• react: https://unpkg.com/[email protected]/umd/
• react-art: https://unpkg.com/[email protected]/umd/
• react-dom: https://unpkg.com/[email protected]/umd/
• react-is: https://unpkg.com/[email protected]/umd/
• react-test-renderer: https://unpkg.com/[email protected]/umd/
• scheduler: https://unpkg.com/[email protected]/umd/
16.9.0-alpha.0 - 2019-04-03
v16.9.0-alpha.0 (April 3, 2019)
- (await act(async () => ...) (@threepointone in #14853)
Artifacts
- react: https://unpkg.com/[email protected]/umd/
- react-art: https://unpkg.com/[email protected]/umd/
- react-dom: https://unpkg.com/[email protected]/umd/
- react-is: https://unpkg.com/[email protected]/umd/
- react-test-renderer: https://unpkg.com/[email protected]/umd/
- scheduler: https://unpkg.com/[email protected]/umd/
16.8.6 - 2019-03-28
16.8.5 - 2019-03-22
16.8.4 - 2019-03-05
16.8.3 - 2019-02-21
16.8.2 - 2019-02-14

from react GitHub release notes

Package name: react-dom

16.13.0 - 2020-02-26
React
- Warn when a string ref is used in a manner that's not amenable to a future codemod (@lunaruan in #17864)
- Deprecate React.createFactory() (@trueadm in #17878)
React DOM
- Warn when changes in style may cause an unexpected collision (@sophiebits in #14181, #18002)
- Warn when a function component is updated during another component's render phase (@acdlite in #17099)
- Deprecate unstable_createPortal (@trueadm in #17880)
- Fix onMouseEnter being fired on disabled buttons (@AlfredoGJ in #17675)
- Call shouldComponentUpdate twice when developing in StrictMode (@bvaughn in #17942)
- Add version property to ReactDOM (@ealush in #15780)
- Don't call toString() of dangerouslySetInnerHTML (@sebmarkbage in #17773)
- Show component stacks in more warnings (@gaearon in #17922, #17586)
Concurrent Mode (Experimental)
- Warn for problematic usages of ReactDOM.createRoot() (@trueadm in #17937)
- Remove ReactDOM.createRoot() callback params and added warnings on usage (@bvaughn in #17916)
- Don't group Idle/Offscreen work with other work (@sebmarkbage in #17456)
- Adjust SuspenseList CPU bound heuristic (@sebmarkbage in #17455)
- Add missing event plugin priorities (@trueadm in #17914)
- Fix isPending only being true when transitioning from inside an input event (@acdlite in #17382)
- Fix React.memo components dropping updates when interrupted by a higher priority update (@acdlite in #18091)
- Don't warn when suspending at the wrong priority (@gaearon in #17971)
- Fix a bug with rebasing updates (@acdlite and @sebmarkbage in #17560, #17510, #17483, #17480)
Artifacts
- react: https://unpkg.com/[email protected]/umd/
- react-art: https://unpkg.com/[email protected]/umd/
- react-dom: https://unpkg.com/[email protected]/umd/
- react-is: https://unpkg.com/[email protected]/umd/
- react-test-renderer: https://unpkg.com/[email protected]/umd/
- scheduler: https://unpkg.com/[email protected]/umd/
16.12.0 - 2019-11-14
React DOM
- Fix passive effects (useEffect) not being fired in a multi-root app. (@acdlite in #17347)
React Is
- Fix lazy and memo types considered elements instead of components (@bvaughn in #17278)
Artifacts

• react: https://unpkg.com/[email protected]/umd/
• react-art: https://unpkg.com/[email protected]/umd/
• react-dom: https://unpkg.com/[email protected]/umd/
• react-is: https://unpkg.com/[email protected]/umd/
• react-test-renderer: https://unpkg.com/[email protected]/umd/
• scheduler: https://unpkg.com/[email protected]/umd/
16.11.0 - 2019-10-22
React DOM
- Fix mouseenter handlers from firing twice inside nested React containers. @yuanoook in #16928
- Remove unstable_createRoot and unstable_createSyncRoot experimental APIs. (These are available in the Experimental channel as createRoot and createSyncRoot.) (@acdlite in #17088)
Artifacts

• react: https://unpkg.com/[email protected]/umd/
• react-art: https://unpkg.com/[email protected]/umd/
• react-dom: https://unpkg.com/[email protected]/umd/
• react-is: https://unpkg.com/[email protected]/umd/
• react-test-renderer: https://unpkg.com/[email protected]/umd/
• scheduler: https://unpkg.com/[email protected]/umd/
16.10.2 - 2019-10-03
React DOM
- Fix regression in react-native-web by restoring order of arguments in event plugin extractors (@necolas in #16978)
Artifacts

• react: https://unpkg.com/[email protected]/umd/
• react-art: https://unpkg.com/[email protected]/umd/
• react-dom: https://unpkg.com/[email protected]/umd/
• react-is: https://unpkg.com/[email protected]/umd/
• react-test-renderer: https://unpkg.com/[email protected]/umd/
• scheduler: https://unpkg.com/[email protected]/umd/
16.10.1 - 2019-09-28
React DOM
- Fix regression in Next.js apps by allowing Suspense mismatch during hydration to silently proceed (@sebmarkbage in #16943)
16.10.0 - 2019-09-27
React DOM
- Fix edge case where a hook update wasn't being memoized. (@sebmarkbage in #16359)
- Fix heuristic for determining when to hydrate, so we don't incorrectly hydrate during an update. (@sebmarkbage in #16739)
- Clear additional fiber fields during unmount to save memory. (@trueadm in #16807)
- Fix bug with required text fields in Firefox. (@halvves in #16578)
- Prefer Object.is instead of inline polyfill, when available. (@ku8ar in #16212)
- Fix bug when mixing Suspense and error handling. (@acdlite in #16801)
Scheduler (Experimental)
- Improve queue performance by switching its internal data structure to a min binary heap. (@acdlite in #16245)
- Use postMessage loop with short intervals instead of attempting to align to frame boundaries with requestAnimationFrame. (@acdlite in #16214)
useSubscription
- Avoid tearing issue when a mutation happens and the previous update is still in progress. (@bvaughn in #16623)
Artifacts

• react: https://unpkg.com/[email protected]/umd/
• react-art: https://unpkg.com/[email protected]/umd/
• react-dom: https://unpkg.com/[email protected]/umd/
• react-is: https://unpkg.com/[email protected]/umd/
• react-test-renderer: https://unpkg.com/[email protected]/umd/
• scheduler: https://unpkg.com/[email protected]/umd/
16.9.0 - 2019-08-08
React
- Add <React.Profiler> API for gathering performance measurements programmatically. (@bvaughn in #15172)
- Remove unstable_ConcurrentMode in favor of unstable_createRoot. (@acdlite in #15532)
React DOM
- Deprecate old names for the UNSAFE_* lifecycle methods. (@bvaughn in #15186 and @threepointone in #16103)
- Deprecate javascript: URLs as a common attack surface. (@sebmarkbage in #15047)
- Deprecate uncommon "module pattern" (factory) components. (@sebmarkbage in #15145)
- Add support for the disablePictureInPicture attribute on <video>. (@eek in #15334)
- Add support for onLoad event for <embed>. (@cherniavskii in #15614)
- Add support for editing useState state from DevTools. (@bvaughn in #14906)
- Add support for toggling Suspense from DevTools. (@gaearon in #15232)
- Warn when setState is called from useEffect, creating a loop. (@gaearon in #15180)
- Fix a memory leak. (@paulshen in #16115)
- Fix a crash inside findDOMNode for components wrapped in <Suspense>. (@acdlite in #15312)
- Fix pending effects from being flushed too late. (@acdlite in #15650)
- Fix incorrect argument order in a warning message. (@brickspert in #15345)
- Fix hiding Suspense fallback nodes when there is an !important style. (@acdlite in #15861 and #15882)
- Slightly improve hydration performance. (@bmeurer in #15998)
React DOM Server
- Fix incorrect output for camelCase custom CSS property names. (@bedakb in #16167)
React Test Utilities and Test Renderer
- Add act(async () => ...) for testing asynchronous state updates. (@threepointone in #14853)
- Add support for nesting act from different renderers. (@threepointone in #16039 and #16042)
- Warn in Strict Mode if effects are scheduled outside an act() call. (@threepointone in #15763 and #16041)
- Warn when using act from the wrong renderer. (@threepointone in #15756)
Artifacts

• react: https://unpkg.com/[email protected]/umd/
• react-art: https://unpkg.com/[email protected]/umd/
• react-dom: https://unpkg.com/[email protected]/umd/
• react-is: https://unpkg.com/[email protected]/umd/
• react-test-renderer: https://unpkg.com/[email protected]/umd/
• scheduler: https://unpkg.com/[email protected]/umd/
16.9.0-rc.0 - 2019-08-05
This is a release candidate for React v16.9.0.

Changelog is available in #16254.

UMD builds

• react: https://unpkg.com/[email protected]/umd/
• react-art: https://unpkg.com/[email protected]/umd/
• react-dom: https://unpkg.com/[email protected]/umd/
• react-is: https://unpkg.com/[email protected]/umd/
• react-test-renderer: https://unpkg.com/[email protected]/umd/
• scheduler: https://unpkg.com/[email protected]/umd/
16.9.0-alpha.0 - 2019-04-03
v16.9.0-alpha.0 (April 3, 2019)
- (await act(async () => ...) (@threepointone in #14853)
Artifacts
- react: https://unpkg.com/[email protected]/umd/
- react-art: https://unpkg.com/[email protected]/umd/
- react-dom: https://unpkg.com/[email protected]/umd/
- react-is: https://unpkg.com/[email protected]/umd/
- react-test-renderer: https://unpkg.com/[email protected]/umd/
- scheduler: https://unpkg.com/[email protected]/umd/
16.8.6 - 2019-03-28
16.8.5 - 2019-03-22
16.8.4 - 2019-03-05
16.8.3 - 2019-02-21
16.8.2 - 2019-02-14

from react-dom GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade: - react from 16.8.2 to 16.13.0. See this package in NPM: https://www.npmjs.com/package/react - react-dom from 16.8.2 to 16.13.0. See this package in NPM: https://www.npmjs.com/package/react-dom See this project in Snyk: https://app.snyk.io/org/saiichihashimoto/project/1548d574-0290-4988-8d6a-466dde94ebb0?utm_source=github&utm_medium=upgrade-pr

auto-assign bot assigned saiichihashimoto Mar 7, 2020

saiichihashimoto closed this Aug 15, 2020

saiichihashimoto deleted the snyk-upgrade-275273841c203d68ef47ac959658b737 branch August 15, 2020 01:57

[Snyk] Upgrade: react, react-dom #518

[Snyk] Upgrade: react, react-dom #518

Conversation

snyk-bot commented Mar 7, 2020

Snyk has created this PR to upgrade multiple dependencies.

React

React DOM

Concurrent Mode (Experimental)

Artifacts

React DOM

React Is

Artifacts

React DOM

Artifacts

React DOM

Artifacts

React DOM

React DOM

Scheduler (Experimental)

useSubscription

Artifacts

React

React DOM

React DOM Server

React Test Utilities and Test Renderer

Artifacts

UMD builds

v16.9.0-alpha.0 (April 3, 2019)

Artifacts

React

React DOM

Concurrent Mode (Experimental)

Artifacts

React DOM

React Is

Artifacts

React DOM

Artifacts

React DOM

Artifacts

React DOM

React DOM

Scheduler (Experimental)

useSubscription

Artifacts

React

React DOM

React DOM Server

React Test Utilities and Test Renderer

Artifacts

UMD builds

v16.9.0-alpha.0 (April 3, 2019)

Artifacts